PT-2021-7359 · Linux+5 · Linux Kernel+5

Butt3Rflyh4Ck · Published 2021-08-23 · Updated 2023-11-09 · CVE-2021-3739

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A NULL pointer dereference flaw was found in the btrfs rm device function in fs/btrfs/volumes.c in the Linux Kernel. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability. Triggering the bug requires CAP SYS ADMIN.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2021-3330

ALT-PU-2021-3331

ALT-PU-2021-3357

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

ALT-PU-2023-4894

BDU:2022-05780

CVE-2021-3739

DSA-4978-1

MGASA-2021-0418

MGASA-2021-0419

OPENSUSE-SU-2021:1271-1

OPENSUSE-SU-2021:3179-1

OPENSUSE-SU-2021:3205-1

OPENSUSE-SU-2021_1271-1

OPENSUSE-SU-2021_3179-1

OPENSUSE-SU-2021_3205-1

SUSE-SU-2021:3177-1

SUSE-SU-2021:3178-1

SUSE-SU-2021:3179-1

SUSE-SU-2021:3205-1

SUSE-SU-2021:3205-2

SUSE-SU-2021:3207-1

SUSE-SU-2021:3415-1

USN-5113-1

USN-5115-1

USN-5117-1

USN-5137-1

USN-5137-2

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

References · 309

• 🔥 https://github.com/torvalds/linux/commit/e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091 · Exploit
• https://osv.dev/vulnerability/USN-5137-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40490 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3739 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3739 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:3205-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3739 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3743 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5137-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-3702 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9457.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3753 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3732 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3179-1 · Vendor Advisory